Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: ShQRp2+0AUd2otGG8g9U94pJHXcyOjvmm2zRBrvWES4=
Subject key identifier: E7:E5:96:90:4A:2A:E4:02:62:C5:9C:38:A2:29:82:C2:97:38:E3:C6
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 0198D65F52DE6919A7330EA061F79608DC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: 8TiiymF_qXe5_0OSXGhXtrvPRF8.roa (hash: GluSxaIDrro0bR3RvWbGWujqLOuubQy6kwNOc8o6hgc=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: ByeXg8aQyQRrsOxVaU7OR/YPhr1xnDtx1hE4+y4lbWM=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:52:de:69:19:a7:33:0e:a0:61:f7:96:08:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=e7e596904a2ae40262c59c38a22982c29738e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:36:d9:d4:d7:1c:5d:11:df:f3:63:1c:63:
6c:24:ca:cd:f0:f9:1c:65:cf:3f:31:c5:d6:a9:4e:
9c:82:88:88:65:75:f3:ec:56:13:20:59:0e:6b:1c:
18:bb:fd:4e:a3:96:9f:76:4f:dc:37:d2:b4:a3:ee:
7d:23:bc:95:7d:29:3c:48:15:48:e9:e7:06:db:c0:
0f:61:f7:e6:50:28:e2:eb:27:3c:fd:bf:3b:0f:de:
6b:e2:23:48:0e:36:76:e9:1d:7c:67:f4:49:6c:b0:
e1:6e:42:97:46:2e:27:2e:73:79:3f:97:7f:a4:32:
37:20:07:58:b5:65:61:4b:26:be:37:ed:5a:8f:7a:
65:12:c9:0a:0b:60:e7:25:39:9d:5b:c6:89:ab:e5:
5f:83:1e:ee:66:61:3a:bc:49:f5:ec:5f:58:af:f6:
aa:9d:0f:be:d0:0a:b1:07:d1:4a:fa:1d:fc:61:e9:
9d:97:17:bc:35:0b:3f:dc:66:b8:67:3e:b1:7d:4d:
d0:ec:8b:a6:ca:9c:ce:e2:a1:62:aa:46:dc:66:dd:
25:64:af:6e:77:4c:d6:78:4a:c2:c9:75:6c:3d:97:
54:6d:78:a9:50:84:ce:37:73:e7:cc:c4:81:ad:d7:
d0:ab:d7:9e:8c:6c:7c:4f:3e:43:a3:b4:02:b2:0f:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:96:90:4A:2A:E4:02:62:C5:9C:38:A2:29:82:C2:97:38:E3:C6
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:46:81:40:ce:95:4e:0a:6e:d3:f5:7d:68:eb:ff:b7:e3:e3:
4b:a3:e7:3f:03:50:d2:0f:cd:3a:7e:7d:8a:7b:ef:47:f8:49:
13:c6:4f:21:fe:23:0d:a4:4b:ba:c2:76:3a:06:7a:d4:ed:09:
0e:32:52:69:9d:47:11:e0:7a:37:51:ee:d0:e9:44:8f:ac:5d:
e3:e4:80:25:0e:e9:30:67:32:75:37:66:e6:bf:1f:3e:43:68:
1b:a3:06:39:f8:6a:c0:b9:06:d5:ae:e5:49:6d:98:ab:97:20:
a7:c0:da:97:f1:e9:99:23:4d:17:db:42:0d:a5:e2:ed:a4:00:
30:0b:e5:b4:42:d2:08:f0:41:bf:51:49:a8:fe:0b:63:1e:8d:
01:63:9b:bb:0c:9c:82:73:52:cc:a3:76:0a:a9:c7:84:77:d2:
34:b5:b9:07:eb:7a:90:d9:46:c0:07:cf:4b:3d:4e:0d:dd:ff:
b4:a4:11:63:b3:03:d6:20:8d:5c:d6:52:a5:e9:2c:75:c9:94:
8c:eb:64:6f:2a:8d:af:a6:00:1b:2b:3a:1d:5a:a7:ac:97:b8:
1c:8e:96:19:33:5d:df:21:67:95:49:4f:89:d2:32:b6:8e:2f:
13:17:91:cb:4c:c9:69:68:32:90:70:9b:af:a2:a0:49:00:4a:
eb:a9:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:48 2025 by rpki-client